_ YES If yes, indicate which of the following changes were involved (mark all 

changes that apply, and provide brief explanation for each marked change): 

_ A conversion from paper-based records to an electronic system. 

_ A change from information in a format that is anonymous or non- 

identifiable to a format that is identifiable to particular individuals. 

_ A new use of an IT system/project, including application of a new 

technology, that changes how information in identifiable form is managed. 
(For example, a change that would create a more open environment and/or 
avenue for exposure of data that previously did not exist.) 

_ A change that results in information in identifiable form being 

merged, centralized, or matched with other databases. 

_ A new method of authenticating the use of and access to 

information in identifiable form by members of the public. 

_ A systematic incorporation of databases of information in 

identifiable form purchased or obtained from commercial or public sources. 

_ A new interagency use or shared agency function that results in 

new uses or exchanges of information in identifiable form. 

_ A change that results in a new use or disclosure of information in 

identifiable form. 

_ A change that results in new items of information in identifiable 

form being added into the system/project. 

_ Changes do not involve a change in the type of records maintained, 

the individuals on whom records are maintained, or the use or 
dissemination of information from the system/project. 

_ Other [Provide brief explanation]: 

3. Does a PIA for this system/project already exist? 

_NO _YES 


If yes: 


a. Provide date/title of the PIA: 
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b. Has the system/project undergone any significant changes since the PIA? 
_NO _YES 

[The PTA is now complete nod after division approval(s) should be submitted to 
FBI OGC/PCLU for final FBI approval and determination if PIA and/or other 
actions are required.] 
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FBI PRIVACY THRESHOLD ANALYSIS (PIA) 

(Equividcat l:o ihc DOJ didud Pdvscy A«:><*.«smc:rt? OPA}} 
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OGC/PCLU (Rev. 04/01/2011) 

FBI PRIVACY THRESHOLD ANALYSIS (FTA) 

NAME OF SYSTEM / PROJECT: Guardian One-Way Transfer 
B1KR FBI Unique Asset ID: SYS- 00Q264 __ 

b6 
b7C 


SYST EM/FRO JECT FO C 
N ame: | | 

Program Office: GMU 
Division: CTD 
Phone: I I 


FBI OGC/PCLU PO C 
Name I 


Room Number: 7350 


FBI DIVISION INTERM EDIATE APPROVALS 



Program Marker (or other appropriate 

Division Privacy Officer 

■—-^- 

Program Division: 
Counterterrorism 
Division (CTD) 

Signature:] | 

Signature:/| 

Date signed: fZW'/M €J 

Date signed: ■ / fs?//% 5 

Name:! 

Name] ) 

Title: Unit Chief, Guardian Management 

Unit (GMU) 

V s ' ■' 

Title: Unit Chief, Executive Staff 
Communications, Policy, & Compliance 

Unit (ES-CPCU) 

FBIHQ Division: 
Counterterrorism 

Division (CTD) 

Signature x 

Date sig.bed: /////.S 

Name: Stephen A Buear 

Title: Section Chief. Exploitation Threat 
Section (XTS) 

Signature: 

Date signed: 

Name] ' 

Title: Unit Chief, Executive Staff 
Communications, Policy, & Compliance 

Unit (ES-CPCU) 


V s a \' forward s v. v N s electronic c *p> te I ft I OGC PCI 5 

,; \ -m t\vuc> mo \A o i 4'v5io;\ OitxwV detenmnattoov a«c or bird approv'd od: ho wodri-'ifie 

blowing page.) 
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FINAL FBI A PPROVAL / DETERMINATIONS / CONDITIONS: 


_PI A is required by the E-Government Act. 

PIA is to be completed as a matter of FBI/DOJ discretion. 

Is PIA to be published on FBI.GOV (after any RMD FOIA redactions)? _Yes. „ No : 

_X_ PIA is not required for the following reasonts): 

System does not collect, maintain, or disseminate Pit. 

System is grandfathered (in existence before 4/17/2003; no later changes posing significant privacy nsks). 
X Information in the system relates to internal government operations. 

System has been previously assessed under an evaluation similar to a PLA. 

"X No significant privacy issues (or privacy issues are unchanged). 

Other: 


Applicable SORN(s): FBI-G22.~Dat. a Warehouse System and POJ-OQ2,,D eparted 
Activity and Access Rec ords------------- 


Notify FBI RMD/RIDS per MTOG 190.2.3? X N o „_Yes-See sample EC m PCLU intranet website here: 

http://home/DO/OGC/I,TB/PCm'PrivacyCivil%20Liberties%20Library/form.for_miogl90-2-3_ee.vv'pd 

SORN/SORN revisionfs) required? 


Prepare/revise/add Privacy Act (e)(3) statements for related forms? —No 


RECORDS. The program should consult with RMD to identify/resolve any Federal records/electronic records issues. 
The system may contain Federal records whether or not it contains .Privacy Act requests and, in any event, a records 
schedule approved by the National Archives and Records Administration is necessary. RMD can provide advice on this 

as well as on complianc e with requirements for Electronic Recordkeeping Certification and any necessary updates._ _ 

Other: 


j Acting Unit Chief 
Privacy and Civil Liberties Unit 


Signature: 



Christine M. Costello, Acting Deputy General Counsel 
FBI Privacy and Civil Liberties Officer 


14-06-04-FBI-F(Sf^aHS4fied-5th-Production 




























Unclassified 


I. INFORMATION ABOUT TOE SYSTEM / PROJECT 

1, Provide a general description of the system or project that includes: (a) 
name of the system/project, including associated acronyms; (fo) structure of 
the system/project, including interconnections with other projects or systems; 
(c) purpose of the system/projeet; <d) nature of the information in the 
system/project and how it will be used; (e) who will have access to the 
information in the system/project; (f) and the manner of transmission to all 
users. 

a. Name: Guardian One-Way Tra nsfer (Guardian QWT) _ 

b. Structure: The Guardian OWI j | 

| |The Guardian QWT is a cross-domain 

system that connects eGuardian to Guardian. 

c. Purpose: The Guardian QWT is used to automatically transfer data from 
eGuardian to Guardian. Data is placed in a folder on the low side OWT 
server, it is detected within seconds and moved through the system to the 
high side OWT server. Once on the high side, it is detected within seconds 
and moved into the Guardian database. 

d. Nature of the In formation: Suspicious Activity Report records being 
transferred from eGuardian to Guardian. No data is retained on the OWT 
servers. Audit logs for the transfers are maintained in eGuardian and 
Guardian, not in the transfer system. There is no separate login for the 
transfer system. 

e. Who will have access: Data is only accessible by system administrators 
and only for a very short time. 

£ Transmission to users: Data is not transmitted to users by the Guardian 
OWT. 

2. Does tire system/project collect, maintain, or disseminate any information about 
individuals (i.e., a human being or natural person, regardless of nationality)? 

_X _ NO |If bo, STOP. The P i A is now complete and after division approvals) 

shook! he submitted to FBI CK»< IH H for final approval Unless are 
otherwise advised, tm PI A Is rerptired.) 

_YES f If yes, please continue,] 

3. Please indicate if any of the following characteristics apply to the information in the 
system about individuals: Bear in mind that log-on information may identify or be 
linkable to an individual. 

(Check all that apply.) 

__ The information directly identifies specific individuals. 

___ The information is intended to be used, in conjunction with other data elements, 
to indirectly identify specific individuals. 
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The information can be used to distinguish or trace an individual’s identity (i.e., it 
is linked or linkable to specific individuals). 

If you marked any of the above, proceed to Question 4. 

None of the above. If none of the above, describe why the information does not 
identify specific individuals either directly or indirectly. 

4. Does the system/project pertain only to government employees, contractors, or 
consultants? 

_NO _YES 

5. Is information about United States citizens or lawfully admitted permanent resident 
aliens retrieved from the system/project by name or other personal identifier? 

_NO. Ilf no, skip to question 7.] 

_YES. [If yes, proceed to the next question.! 

6. Does the system/project collect any information directly from the person who is the 
subject of the information? 

NO [If no, proceed to question 7.) 

_YES 

a. Does the system/project support criminal, CT, or FCI investigations or 
assessments'? 

_NO 

_YES [if yes, proceed to question 7.| 

b. Are subjects of information from whom the information is directly collected 
provided a written Privacy Act (e)(3) statement (either on the collection form or via a 
separate notice)? 

_NO [The program will need to work with PCLU to develop/implement 

the necessary form(s).j 

YES Identify any forms, paper or electronic, used to request such 
information from the information subject: 
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7. Are Social Security Numbers (SSNs) collected, maintained or disseminated from the 
system project? Full SSNs should only he used as identifiers in limited instances. 

____ NO _____ YES If yes, check all that apply: 


_SSNs are necessary to establish/confirm the identity of subjects, victims, 

witnesses or sources in this law enforcement or intelligence activity. 

SSNs are necessary to identify FBI personnel in this internal administrative 

system. 

SSNs are important for other reasons. Describe: 

_The system/project provides special protection to SSNs (e.g., SSNs are 

encrypted, hidden from all users via a look-up table, or only available to certain 
users). Describe: 

It is not feasible for tire system/project to provide special protection to 
SSNs. Explain: 

8. Is the system operated by a contractor? 

_No. 

_Yes. Information systems operated by contractors for the FBI may be 

considered Privacy Act systems of records. The Federal Acquisition Regulation 
contains standard contract clauses that must be included in the event the system 
collects, maintains or disseminates PH and additional requirements may be 
imposed as a matter of Department of Justice policy. Consultations with the 
Office of the General Counsel may be required if a contractor is operating the 
system for the FBI. 

9. Has the system undergone Certification & Accreditation (C&A) by the FBI 
Security Division (SecD)? 

NO If no, indicate reason; if C&A is pending, provide anticipated 
completion date: 

_ YES if yes, please indicate the following, if known: 

Provide date of last €&A certification/re-certification: 
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Confidentiality:_Low_Moderate __Higli ^Undefined 

Integrity: _Low Moderate High Undefined 

Availability': _Low Moderate MigH Undefined 

__ Not applicable - this system is only paper-based. 

10. Does the system conduct data mining as defined in Section 804 of the 
Implementing Recommendations of the 9/11 Commission Act of 2007, P.L. 110- 
53 (codified at 42 USC 2000ee-3)7 

_NO 

YES If yes, please describe the data mining function: 

11. Is this a national security system (as determined by the SecD)? 

_NO __ YES 

12. Status of System/ Project: 

This is a new system/ project in development. 

If. EXISTING SYSTEMS / PROJECTS 

1. When was the system/project developed? 

2. Has the system/project undergone any significant changes since April 17, 2003? 

NO [If no, proceed to next question (11.3).} 

YES If yes, indicate which of the following changes were involved (mark all 
... changes that apply, and provide brief explanation for each marked change): 

A conversion from paper-based records to an electronic system. 

A change from information in a format that is anonymous or non- 
identifiable to a format that is identifiable to particular individuals. 

A new use of an IT system/project, including application o f a new 
technology, that changes how information in identifiable form is managed. 
(For example, a change that would create a more open environment and/or 
avenue for exposure of data that previously did not exist.) 
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__ A change that results in information in identifiable form being 
merged, centralized, or matched with other databases. 

. A new method of authenticating the use of and access to 

information in identifiable form by members of the public. 

___ A systematic incorporation of databases of information in 
identifiable form purchased or obtained from commercial or public sources. 

A new interagency use or shared agency function that results in 
new uses or exchanges of information in identifiable form. 

A change that results in a new use or disclosure of information in 
identifiable form. 

A change that results in new items of information in identifiable 
form being added into the system/projeet. 

Changes do not involve a change in the type of records maintained, 
the individuals on whom records are maintained, or the use or 
dissemination of information from the system/project, 

_ Other (Provide brief explanation]: 

3. Does a PI A for this system/project already exist? 

_NO _YES 


If yes: 

a. Provide da te/tltie of the PL4: 

b. Has the system/projeet undergone any significant changes since the P1A? 

__ NO .YES 
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UNCLASSIFIED, 


(OGC/FCLU (Rev. 04/01/201I)} 


FBI PRIVACY THRESHOLD ANALYSIS (PTA) 


NAME OF SYSTEM /PROJECT: 


BIKE FBI Umqm Ass at ID: SYS-OOOOO.T 


SYSTEM/FROJECT FOC 
Name: I *| 

Program Ol hee: CMU 
Divisi on: CTD 
Phone: I I 

Room Number: IBB, Rm 4931 


FBI OGC/PCLC PQ€ 

Name 

iPhone_ 

|Room Number; JEH, Rm 7350 


FBI DIVISION INTERMEDIATE APPROVALS 


Program Division: 
Connterterremm 
Division (Oil) 


FB5.HQ Division: 
Cross re ri e msm® 
Division (CTD) 


Program Manager; (or other appropriate 

executive ns Division determines) _ 

Signature!|ZTT7 
Date .■ii aied>>'»'g/ -t/M 
Name: | | 

I ulo Unit Chief, iGuardian Management 
U n it (Q M U ^ 

Date signed? # * 

Name: Stephen A. Bnear 

Title: Section Ch.ie.fi Exploitation Threat 

Section (XTS) 


| Division Privacy Offset 


After all dhdskm approval, forward signed fan! copy pies electronic copy to FBI. OOC/FCLI1 (JEM 7350), 
(The FBI Privacy and Civil Liberties Officer's determinations, conditions, and/or * will be recorded on 


UNCLASSIFIED // 
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FINAL FBI APPROVAL / DETERMINATIONS / CONDITIONS; 


i FLA is required by the E-Government Act. 

.PSA is to be completed as a matter of FBS/DOi discretion. 

Is PSA to be published on FB1.GOV (after any RMD FOIA redactions)? Yes. No: 


...X PI A is not required for the followingireason($); 

.System does not collect, maintain, or disseminate Pit. 

System is grandfathered (in existence before 4/17/2003; no later changes posing significant privacy risks). 
In formation in the system relates to internal government operations. 

.System has been previously assessed under an evaluation similar to a Pi A. 

.No significant privacy issues (or privacy issues are unchanged). 

_X_ Other: 


Due to the limited nature of this pilot, a PI A is not required at Shis time. However, if the FBI decides to continue this 
sharing after the 90 day period expires or significantly alters the proposed pilot, a PI A will be required. 


Applicable SOR\\s) JO I I HI or I Bl D<fa \\ Uvhousc Vwun„": led IQ a JfeniQuK f6T . 

20 . 13 ) . __ 

Notify FBI RMD/R1DS per MIOG 190.2.3?: _X No Yes-See sample EC on PCLU intranet website here: 
Uf» horn. IX) Ovw I 1H f\ fo Pm sou od Cfo d w tus' N>] bs »\ U tv h nu cl 99 2 3 u w x! 

SORN/SORN revision(s) required 9 X No Yes 


Prepare/revise/add Privacy Act (e)(3) statements for related forms? JC_No _ Yes: 


RT c < >?PS Thv p i cm »' sX,nkl <_o < t w Oh R\1 ^ to ;de' tfx uvvu ms 5 u sod u\ > ds eleJi >' <, seeosds issues 

The system may contain Federal records whether or not it contains Privacy Act requests and, in any event, a records 
schedule approved by the National Archives and Records Administration is necessary. HMD can provide advice on this 
as v eh a s on compliance vvuh requirements, for Electronic Recordke eping Certification and any necessary updates. 
'Other:™' 


Monica 1L Ryan, Umt Chief j Signature: S*~~ yC- 

Privacy and Civil liberties Unit j | Date Signed:* * K.~ t > T^' N \~' 

F BI Privacy and Civil Liberties Office r ! |_ //<gt / /^ \ _ J 
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I. INFORMATION ABOUT THE SYSTEM / PROJECT 


E Provide a general description of the system or project that includes; (a) name of 
the system/projeet, including associated acronyms; (b) structure of the 
system/project including interconnections with other projects or systems; (e) 
purpose of the system/projeet; (d) nature of the information iu the sysiem/projcet 
and how it will be used; (e) who will have access to the information in the 
system/project; (f) and the manner of transmission to all nsers. 




b3 

b7E 


2. Does the system/project collect, maintain, or disseminate any information about 
individuals (be .,» human being or natural person, regardless of nationality}? 

i . .. . NO [If no, STOP. The PTA is now complete and after division 
approval(s) should be submitted to FBI OGC/PCLli for final FBI approval. Unless 
yon are otherwise advised, no PIA is required.} 

X_YES {If yes, please continue,] 

3. Please indicate if any of the!following characteristics apply to the information in 
the system about Individuals: Bear in mind that log-on information may identify or 
be linkable to an individual 

(Cheek all that apply.) 

X The information directly identifies specific individuals. 

.X _ The Information is intended to he used, in conjunction with other data elements, 

to indirectly identify specific individuals. 

X. The information can be used to distinguish or trace an individual’s identity (i.e., it 

is linked or linkable to specific individuals). 

If you marked any of the above: proceed to Question 4. 

None of the above. If none of the above, describe why the information does not 
identify specific individuals either directly or indirectly. [If you checked this item, 
STOP here after providing the requested description.) 
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4, Does the system/projeet pertain only to government employees, contractors, or 
consultants? 

X NO _YES 

5, Is information about United States citkens or lawfully admitted permanent 
resident aliens retrieved from the system/project by name or other personal 
identifier? 

_NO. (If no, skip to question 7«] 

X YES. [If yes, proceed to tbe next question.] 

b> Does tbe system/project collect any information directly from the person who is 
the subject of the information? 

X NO {If no, proceed to question 7.] 

_YES 

a. Does the system/projeet support criminal, CT, or F€I investigations or 
assessments? 

_NO 

X_YES (If yes, proceed to question 7.} 

b. Are subjects of information from whom the information is directly 
collected provided a written Privacy Act (e)(3) statement (either on the collection 
form or via a separate notice)? 

NO {The program will need to work with PCLli to develop/implement 
tbe necessary form(s).j 

.YES Identify any forms, paper or electronic, used to request snch 

information from the information subject; 

7. Are Social Security Numbers (SSNs) collected, maintained or disseminated from 
tbe system/projeet? Full SSNs should only be used as identifiers in limited 
instances, 

.NO _X.YES- If yes, check all that apply : 


. X _SSNs are necessary to cstablish/confirm tbe identity of subjects, victims, 

witnesses or sources in this law enforcement or intelligence activity. 
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SSNs arc necessary to identify PBi personnel in this internal administrative 

system, 

SSNs are important for other reasons. Describe; 

The system/project provides special protection to SSNs (e.g., SSNs are 
encrypted, hidden from all users via a look-up table, or only available to certain 
users). Describe: 


X _it is not feasible for the system /project to p rovide special protection to 

SSNs. Explai n: SSNs are entered Into! Iwhen available ro assist _ b3 

mveffigatlonx. | ~| b73 


8. Is the system operated by a contractor? 

JL'No. 

Yes. information systems operated by contractors for the FBI may he 
considered Privacy Act systems of records. The Federal Acquisition Regulation 
contains standard contract clauses that must be included in the event the system 
collects, maintains or disseminates P1I and additional requirements may be 
imposed as a matter of 1 department of Justice policy, Consultations w stlt the 
Office of the General Counsel may be required if a contractor is operating the 
system for the FBI, 

9. Has the system undergone Certification & Accreditation (C&A) by the FBI 
Security Division (Seel))? 


NO If no, indicate reason: if C& A is pending, provide anticipated 
completion date; 

X YES If yes, please Indicate the following, if known: 

Provide date of last C&A certificaiion/re-eertifkation: 
February 11,21113 
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Confidentiality:_Low X Moderate_High_Undefined 

Integrity: _Low X Moderate High Undefined 

Availability: _Low X M oderate High Undefined 

Not applicable - this system is only paper-based. 

10. Does the system conduct data mining as defined in Section 804 of the 
Implementing Recommendations of the 9/31 Commission Aet of 2007, P.L. 110-53 
/codified at 42 USC 2000ee-3)? 


_YES If yes, please describe the data mining function: 

11, Is this a national security system (as determined by the SeeB)? 

.NO .; X.YES 

12. Stains of System/ Project: 

This is a new system/ project in development. [If you checked this 
block, STOP. The PTA is now complete and after division approvals) should 
he submitted to FBI OGC/PCLU for final FBI approval and determination if 
Pi A and/or other actions are required.] 

II. EXISTING SYSTEMS / PROJECTS 

1. When was the system/project developed? 2005 

2. Has the system/project undergone any significant changes since April 37, 2003? 

. NO [If no, proceed to next question (0,3 }.| 

X YES I f yes, indicate which; of the following changes were invol ved (mark all 
changes that apply, and provide brief explanation for each marked change): 

.. A conversion from paper-based records to an electronic system. 

A change from information in a format that is anonymous or non- 
idemifiable to a format that is identifiable to particular individuals. 
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A new use of an IT system/project, Including application of a new' 
technology, that changes how information its identifiable form is managed. 
(For example, a change that would create a more open environment and/or 
a venue for exposure of data that previously did not exist .) 

_ A change that results in information in identifiable form being 

merged, centralised, or matched with other databases. 

_A new method of authenticating the use of and access to 

information in identifiable form by members of the public. 

A systematic incorporation of databases of information in 
identifiable form purchased or obtained from commercial or public 
sources. 

X A new interagency use or shared agency function that results in 
new uses or exchanges of information in identifiable form. 

A change that results in a new use or disclosure of information in 
identifiable form. 

A change that results in new items of information in identifiable 
form being added into the system/project. 

Changes do not involve a change in the type of records maintained, 
the individuals on whom records are maintained, or the use or 
dissemination, of information from the system/project. 

Other fProvide brief explanation!: 

3. Does a Pi A for this system/project already exist? 

.NO .J.YES 


If yes: 

a. Provide date/tiile of the PI A: | 

b. Has the system/project undergone any significant changes since the P!A? 

i.NO _X YES 


I The FT A Is now complete and after division approval(s) should be submitted to 
FBI OGC7POTJ for final FBI approval and determination if PI A and/or other 
actions are required.] 
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LM LASS!PIED 


L INFORMATION ABOUT THE SYSTEM / PROJECT 

I, Prw.uk a general <km'ripfkm of the sy-oem *>r project that Includes; mmw o? the 
s>wtem.foroi«ct. meludmg associated acronyms; structure of the sytntm/ptt^u 
purpose; nature of the informathm in the system am! haw ii will he used; who will 
have access to the Information m the system and the manner of ir*a$mi$si&« to all 
users.. 

The lining Mae agent eth Sane Is an internet web application comprised of the following 
^ v t hvi ( n ! \ nor x' ^ ■>• !t 

and. Hiring Management position Class ideation Component All data used by tlse.se 
components are contained m electronic format stored on a group of relations! database 
servers. The Hiring Management Suite rebus on a computer network (both IAN and 
public Internet y hardware and supporting in Ira structure components, to operate with 
reliability and perform dally business functions. 


quoidkatron detenu mad o.ns f veterans preforeace adiudieatfons, and the rating and 
making processes. The FBI'S Hiring Management System is a eomsoewia! oilThe'-shdf 
tool that meets current and future strategic workforce hiring goals and improves the 
quality of the candidate selection process There Is a recurrrernent Imposed on the FBI. by 
the I' e nrct.t w . usnco at •.. % ? ofkc w l\o\ s mecl '' m , ■ ■, a .bn; ^ 

management system: that tdilines the power of the Internet and automation that impro ves 
tire reernuiua and staffing process. 

The FBI's Hiring Management System stake!s information front individuals inside and 
outside of the FBI oho wish to he considered lor Special .Agent and Professional Staff 
go shin ns being tided by the FBI. The FBI Hiring Management System is integrated with 
the Office of Personnel Management's USaJOBS Web site. On the OPM website, 
applicants mfoaliy en ter personal identifying information, answer a series of registration 
questions and enter resume m formation coveting periods of current and past employment, 
Tito realtor. using the Hiring Management System, applicants must enter user information, 
which includes personally identifiable in formation astd must answer a series of questions 
that are spec dkally refuted to the position for which the individual is applying to 
complete the FBI's online job apphcation process. The sources of applicant mformaiion 

Per sonal Identdvmg Information 
f f) Haute 

12 1 8 oe i a t Sec or i ty N amber 

HB Date of Birth 

(4) Home Address 
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UNCLASSIFIED 


(!) Are you a veteran who was repealed from the armed (owes under honorable 
conditions refer cnmnieimg an Initial continuous tour of duty or three (3) years or 
released just a new days short of three fa; years? fAftrsf .Monem 

(2) Are you a veteran old; a compensable service-connected disability of 30% or more? 
oi/roT unvve/y 

1 41 H'you arerwete a civilian federal employee, by what agency and organization 
are/were you employed? (May/ ,dmwen) 

(6) If you are a entreat Federal employee, what Is your duty station? [City. State] (Enter 
N/A if Net Applicable! (Must ..4asawn) 

(?) if you are a currently a. federal employee. under what type of appointment ere yon 

?> > e? » vO oiu 's „vOv>> \;\" or ^ me ' n. 

previously held a pevmanem appointment or time dunked appointment eligible for 
conversion to a permanent appointment in the Federal government? I kb or ,4.mover) 

(9) If you are, or ever were a Federal civilian employee, please Indicate pay plan., aeries 
and grade of (he highest graded positron you held ( oe.,GS 0444-14} f l/vo Auvaaml 

(10) if yon are a current eivillau Federal employee, please Indicate the level of security 
clearance you hold {(infer NA tf No? Apohcoble? (.Ma.w bovver) 

(lit Are yen a ret nee receiving a Federal annuity, either military or civilian?? Afarr 

(FIN May we con tart your current supervisor for a reference'^ (Mmt Answer) 

U 4) it yurt are a male at least 1 3 y ears of age. born alter December 3 1. 195?,. have you 
registered with tire Selective Service System? (4 (no .4newer? 


UNCLASSIFIED 
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l.ACLASSIRF.B 


(15) I understand that my answers to -he following questions determine my stnufofoty tor 
application to AMY post dots, with she FBI? ulfost .dowsers 

; ifo I an; willing to undergo a comprehensive background mveifogaiion which me Indus, 
hot is not limited to: contact with ah references, sam.pioyc.vs, coworkers:, close personal 
associates:, etc-; mvksvofdrlvutg record; credit history; criminal history, and service in 
the .military, (Must dm vers 

(t 7) 1 a-o svdimg to undergo a pre-ernployrnem polygraph, physteal exarm nation, and a 
urinalysis dreg test? Refusal to submit to an FBI unn.ai.ysts (dreg test) Of polygraph 
examination is grounds for disquahlkavton lor the applicant process, 
fo/wo ,ouwvw 

(id ; Are you currently hi dekwh Hading to make payments) on a student loan insured by 
the II.S. Government 
r.ifo.w sfoxtraw 

(20; Have you used niarijaaruccannabis during the last three (3) or have you extensively 
used mar nttanfocatutabis over a substantial period of rime? hi/ws .4n.su e?v 

(21) Have you used any Illegal drag(x) or eornfanation of dlegal drugs, other than 
marijuana, during the past ten Ho; yean or engaged in more than minimal 
experimentation, to your lifetime? (For purposes of this question, the term ''illegal drugs” 
includes the use of anabolic steroids after February 27. 1991. unless the steroids were 

.fnsvvw 

(22) Have yon used an. illegal dmgkl while employed us any late enforcement or 
prosecutorial position; or while employed in a position which carries with it a high level 
of responsibility or public trust; or whi le holding a security clearance? faho? Hmwwy 

(23) Have you distributed or sold any illegal drugs for profit ' /AFor 4n.ru wo 

' ' s •» r i <\\ < Vs 

group, or combination of persons which is totalitarian, fascist, communist, or subversive, 
or which has adopted, or shows a policy of .advocating or approving, the commission of 
arts of force or violence to deny other persons hoar rights under the Constitution of the 
United States, or which seeks to alter the form of Government of the U.S. by 
unconstitutional means'? (Mrs;. 1 nsweri 
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eligibility requimmenUr such as veterans preference status, eligibility to; a Veterans 
Reerm latent Appointment, nr ere a person with a covered dasebdky. pVto/ .answer) 

Resume htiorTuahon 

Tale of Position Held 

Salary 

Employer's Name and Address 
SiqrervNwA: Name and Rhone Number 
Duties and lUsporisibuhles of Poshton 

Npsaams:“N|fecyhy u Ouesy ops 


These questions vary from position so position, and are designed to el felt 
rnlhrmatkm from the individual regarding the alignment of iheh'education, training, and 
mark experience (Ufe v s of the poshson tor ' d^K v. ts apply hag. sard 

the strength of his/her mm liik aliens tor the position, The information ts used to make 
decisions regarding the selection of individuals so Oh Special Agent and Stumors 
post dons it; the Federal Bureau of investigation. 

2. Poes the sysiem/projeel colleen maintain, or disseminate any information about 
Individuals in kleatifotble form, ie., Is information linked to or linkable to sped.de 
individuals (which Is the deflation of personally Identifiable mlhrmaibm {RHtf? 

otherwise advAed. no k| A Is respired,! 


consultants? 

.A.NO .VTA 


4. Is milmmrnon about United States citizens or lavihhy admitted permanent resident 
aliens retrieved man the system/project by name or other personal identifier'' 

.NO .X.YES 
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1 NCI.ASM11ED 


5. Me Ns.: 5: \»orS x ..ml ex- nsM' celUaoo. ;t > momoc w 'l^vw," e d 00:0 lw 
y stem p$ ^.ci" 

NO X YES If yes, check sit Ibsl apply; 


witnesses or sources .0 Yes law enforcement or intehkence activity. 


X SSNs are necessary to Identify FBI personnel in this internal 
administrative system. 


X SSNs toe no port are lor other reasons. Describe: SSNs are necessary to 
estafellsh/eonflnn the Identity of applicants In the system. 

X The system/prolect provides special protection 10 SSNs ;e a., SSNs are 
encrypted, hidden from ad users via a lookup table, or only avail a He to certain 

s \ IOx x ' s >. , !»h tn.uwwve tM^\Nmndh > o >, vV V last 

four digits of the SSN, The rest of it Is masked. 

It Is nut feasible for the svslem/omieci io nrosade apodal nrotecdon to 
^N- IXphaint 


6. Does the aystem/project collect any information directly front the person who is the 
sahiect of the information? 

.X.YES 


a. Does the eystom/profeei support criminal. CIS or PC I Invest! nations or 
assessments? 

.YES i If yes. proceed to -question ?.] 

..,,,JX. SO The system indirectly supports such Investigations or 

assessments only to the extent that a Universal Name Index i UNI) 
check may shew that the person under investigation applied to an 
FBI job via Monster Govenaoeni Solutions Vum 


UNCLASSIFIED 
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DECLASSIFIED 


b. Are subjects of information from whom the information is directly ceikaed 
provided a written Privacy Act (eE3) statement {either on the collection term or via a 
separate notice)? 

v - tI he pro&rato wdi surd o> unrk v oh IN S I to dmekp unpkmcut 
the necessary fortnfshj 

X YES Identify any forms, paper or electronic, used to repuevi sudt 

Information front the Information subject; Applicants are provided a 
Privacy Act te)El) statement via i : S.4J0flS> 

?. Has the system undergone Certification X; Accreditation (CN.A) by the FBI Security 
Division (SecDVi 

x a If no. mduuA k sworn d i X \ ^ pAnCnm prmsfU noUApuled 
Annpht otdoe , \. t ! k\ia „o ,A\v 1 * , , a A,,h 
the set vets ate not owned by rise FBI 

Y ES If y es, provide date of last CNA es^rtifleatkoCre-eertilicatior! ; 


Don't Know. 


.EC 5 .x.Dotft know .YES If yam please provide 

the date and name or title of the 
OMB submission: 

V. v x s . ' v x " 

.X,„„„„ NO .YES .Dona know 


.0. Status nfSystem/ Project' 

STOP, The PI A k sum complete and after division approvalA) shettEI he 
suhtnmed to FBI d€C/P€LE for final FBI approval and deterndnatfon if 


IE EXISTING SYSTEMS ./ PROJECTS 
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t m LAssinr.i> 


s the systetvdprqiect unoe 
NO Ilf no. proceed to n 


Key significant changes since April I 7 . 2003 ? 


YES It yes, krdicnte which < 
boxes tft$t Apply): 


;hhe following chances were involved 


A change from information m a format mat is anonymous or non- 
Identifiable ro a. format that is identifiable to particular individuals, 

technology, that changes how brio rotation to menuibhle harm is managed, 
ef or example, a change that, would create a more open environment and/or 
nemo <o m; v . < : data t sat poca ,\h i 5 '' >, \w, 

ax rued, commixed. nr matched with other da mb sees. 


A new method of authenticating the use of and access m 
mtbrmation in identifiable term by members of the public.. 

A systematic incorporation. of databases of .information in 
identifiable form purchased or obtained from commercial or public sources. 

4/itew micmee-xy use or shared agency function that results in 
new uses or exchanges of information w identifiable form. 


A change 
idwmh.wle mrm 


tufts ha a new use or disclosure of in format iou m 


A change that results in new items 
form being added into the systemmrojeet. 


sf ird'ormadon in ids 


Changers do not involve a change In the. type of records maintained, 
the individuals oti whom records are maintained, or the use 
dis.sennnai.mo of information from, the systemfomleci. 

Other |Provide brief explnnaritml: 

i ' ’ \ " u- \ x r ' vX. < no* *\-n' 

..NO X YES 
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UNCLASSIFIED 


a, UK date title »s'th< PI V: \mn \ a,;.^o ! ! * . (;< 

Privacy impact Assessment (PI A), 0Fd{F2dB4 

b. Mas the system/prmeet imdemonc any stgndicant changes si 


X NO 


YES 


iTIm PI"A A mne enmpiete and alter dhIskm argtmeaiAn Nmnld be sained'ted t 
fill CfOC/PCiLF Or Anal FBI aggravO and dcnnmalnatkm si IB A madAm atlnn' 
sedans are ran yd redd 
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(OGC/PCLU (Rev. 04/01/2011) 


FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM / PROJECT: Hewlett Packard Multi-Function Printer Digital Sending Software 
(HP MFP DSS l I 


BIKR FBI Unique Asset IB: 


Domed fms: 

SYSTEM/PROJECT FOCI 

FBI OGC/PCLU POC 

Clmdled P-v; 

Name: 1 ; 

Name: 



Reason : 

Program Office: FBI/il'B 

Phone 



Declassify €>m 

Division: ITSD 

Room Number: 7350 


rnoneq | 

Room Number: 9342 (FBIHQ) 

_ 



FBI DIVISION INTERM EDIATE APPROVALS 



Program Manager (or other appropriate 
executive a& iiiyissqo 'determines) 

Division Privacy Officer 

Program Division: 

Signature: I j 

Signature: 

ITS!) CSS/MQSUI 

Date signed! V29/U 1 : ; 

Date signed: 


Name:| 1 

Named i 


Title: Unit Chjet 

Title: IT Specialist 

FBIHQ Division: 

Signaturdf ’ . 

Signature: 

ITSB / CSS 

Date signed: 5/29/12 

Date signed: 


Name: Naomi E. Singer 

Name: 


Title: Section Chief 

Title: 


\ \* all OhMon w forward M*<Urd haul uq.n phi\ OtvthBue Oupv so FBI OOi PIT I ull H "J5S.R 

. I 'a- I hi Puw> and * o d I dx'Mes MlYkcth dek'rmmMhavs.. and or Boat approval wall he recorded vn the 

Mkm os;, oaoo i 
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FINAL FBI APPROVAL / DETERMINATIONS / CONDITIONS; 


PIA is required by the E-Government Act. 

__PIA is to be completed as a matter of FBI/DOJ discretion. 

is PIA to be published on FB1.GOV (after any RMD F0IA redactions)? _Yes._No (fndie&te reason}: 


X _PIA is not required for the following reason(s): 

___X System does not collect, maintain, or disseminate PIE 

_“System is grandfathered (in existence before 4/17/2003; no later changes posing significant privacy risks). 

_Information in the system relates to internal government operations. 

_System has been previously assessed under an evaluation similar to a PIA. 

_No significant privacy issues (or privacy issues are unchanged). 

_Other (describe): 


Applicable SORN(s):_N/A___ 

Notify FBi RMD/RIDS per M'lOG 190.2,3? _No _Yes-See sample EC on PCLU intranet website here: 

http://'home,<dX)/OGC/LTB/PCLU/PrivacyCivii%20Libertie$%20I.,ibrar)'/fonn for_miog 190-2-3 ec.wpd 
SORN/SORN revision(s) required? _No _Yes (indicate revisions needed): 


Prepare/revise/add Privacy Act (eX3) statements for related forms? _No __Yes (indicate torsos affected): 

N/A ___ 

RECORDS, The program should consult with RMD to identify/resolve any Federal records/electronic records issues. 
The system may contain Federal records whether or not it contains Privacy Act requests and, in any event a records 
schedule approved by the National Archives and Records Administration is necessary. RMD can provide advice on this 
as well as on compli a nce with requirements for Electronic Recordkeeping Certification and any necessary updates. 
Other: 


! |Unit Chief 

Signature: 
Date S tand 



Privacy and Civil Liberties Unit 

James J. Landon, Deputy General Counsel 

FBI Privacy and Civil Liberties Officer 

Signature: _(/./, 

Date Signed**^ ' v' 


b6 
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L INFORMATION ABOUT THE SYSTEM / PROJECT 


h Provide a general description of the system or project that includes; (a) name of 
the system/project, including associated acronyms; (b)structure of the 
system/project, including Interconnections with other projects or systems; (c) 
purpose of the system/project; (d) nature of the information in the system/project 
and how it will he used; (e) who will have access to the information in the 
system/project; (f) and the manner of transmission to all users. 

• Name of the system/project, including associated acronyms: Hewlett 
Packard Multi-Function Printer Digital Sending Software (HP MFP DSS) 



® Structure of the system/project, including interconnections with other 
projects or systems / purpose of the system/projeet / nature of the 
information in the system/project and how it will he used / who wilt 
have access to the information in the system/projeet i the manner of 
transmission to all users: 


This Privacy Threshold Analysis concerns 


of multi-function 


printers. 


As of this date, there are l ~~l llP Multi-Function Printers that are utilized on 
the FBINET enclave. The devices, which are used throughout the 56 field and 
Legal offices, have the ability to print, copy and scan to FBINET workstations. 
The services that the DSS instance provides has become a “mission critical” need 
for the users throughout the enterprise. 



b7E 


b7E 


b7E 


b7E 
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The best practice as recommended by the HP subject matter experts is to have a 


b7E 


2. Does the system/project coiled, maintain, or disseminate any information about 
individuals (i.e„ a human being or natural person, regardless of nationality)? 

X NO | If nm STOP, The PTA is tmw complete and after division approval^} 

shoaid be submitted to FBI OGCVPCUi for final FBI approval. Unless yon arc 
otherwise advised, no PI A is required,! 

_YES [If yes, please continue,] 

3. Please Indicate if any of the following characteristics apply to the information in the 
system about individuals: Bear in mind that log-on information may identity or be 
linkable to an. individual. 

(Check all that apply.) 

The information directly identifies specific individuals. 

_The information is intended to be used, in conjunction with other data elements, 

to indirectly identify specific individuals. 

_ The information can be used to distinguish or trace an individual's identity (i.e., it 

is linked or linkable to specific individuals). 

If you marked any of the above, proceed to Question 4, 

None of the above. If none of the above, describe why the information docs not 
identify specific individuals either directly or indirectly. [If yon checked this item, 
STOP here after providing Ihe requested description.] 

4. Does the system/project pertain only to government employees, contractors, or 
consultants? 

_NO __ __ YES 

5. Is information about United States citizens or lawfully admitted permanent resident 
aliens retrieved from the system/project by name or other personal identifier? 

_ NO. [If no, skip to question 7.] 
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_____ YES. [If yes, proceed to the next question.] 

6. Does the system/project collect any information directly from the person who is the 
subject of the information? 

______ NO [If no, proceed to question 7.] 

_.__ YES 


a, Does the system/project support criminal, CT, or FCI investigations or 
assessments? 

___.NO 

__ . YE$ [If yes, proceed to question 7.| 

b. Are subjects of information from whom the information is directly collected 
provided a written Privacy Act (e)(3) statement (either on the collection form or via a 
separate notice)? 

_NO [The program will need to work with PCLU to develop/imptement 

the necessary form(s).] 

_YES Identify any forms, paper or electronic, used to request such 

information from the information subject: 

7. Are Social Security Numbers (SSNs) collected, maintained or disseminated from the 
system/project? Full SSNs should only be used as identifiers in limited instances. 

NO _YES If yes, check all that apply: 


_SSNs are necessary to establish/confirm the identity of subjects, victims, 

witnesses or sources in this law enforcement or intelligence activity. 

_____ SSNs are necessary to identify FBI personnel in this internal administrative 
system. 

SSNs are important for other reasons. Describe: 

_The system/project provides special protection to SSNs (e.g., SSNs are 

encrypted, hidden from all users via a look-up table, or only available to certain 
users). Describe: 
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_____ It is not feasible for the system/project to provide special protection to 
SSNs. Explain: 

8. 3s the system operated by a contractor? 

__.No. 

__ Yes. Information systems operated by contractors for the FBI may be 
considered Privacy Act systems of records. The Federal Acquisition Regulation 
contains standard contract clauses that must be included in the event the system 
collects, maintains or disseminates PII and additional requirements may be 
imposed as a matter of Department of Justice policy. Consultations with the 
Office of the General Counsel may be required if a contractor is operating the 
system for the FBI. 

9. Has the system undergone Certification & Accreditation (C&A) by the FBI 
Security Division (SecD)? 

_NO If no, indicate reason; if C&A is pending, provide anticipated 

completion date: 

_____ YES if yes, please indicate the following, if known: 

Provide date of last C&A certiUcation/re-certification: 

Confidentiality:_Low_Moderate_High_Undefined 

Integrity: _Low Moderate High Undefined 

Availability: _.Low Moderate High U ^defined 

___ Not applicable ~ this system is only paper-based. 
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10. Does the system conduct data mining as defined in Section 804 of the 
Implementing Recommendations of the 9/11 Commission Act of2007, P.L. 110* 

53 (codified at 42 USC 2000ee-3)? 

_NO 

___ YES If yes, please describe the data mining function: 

11. Is this a national security system (as determined by the SecD)? 

_NO _YES 

12. Status of System/ Project: 

T his is a new system/ project in development. |If yon checked this block, 
STOP. 1 he FT A is new complete and after division approvals) should he 
sc bauife I to 1 III OGC lb t I for final FBI approval and deter urination d 
PI \ and hr other actions are paired.] 


II. EXISTING SYSTEMS / PROJECTS 

1. When was the system/project developed? 

2. Has the system/project undergone any significant changes since April 17,2003? 

__ NO [If no, proceed to next question (IL3),] 

_ YES If yes, indicate which of the following changes were involved (mark all 

changes that apply, and provide brief explanation for each marked change): 

A conversion from paper-based records to an electronic, system. 

__ A change from information in a format that is anonymous or non- 
identifiabie to a format that is identifiable to particular individuals. 

__ A new use of an IT system/project, including application of a new 
technology, that changes how information in identifiable form is managed. 
(For example, a change that would create a more open environment and/or 
avenue for exposure of date that previously did not exist.) 

_ A change that results in information in identifiable form being 
merged, centralized, or matched with other databases. 
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A new method of authenticating the use of and access to 
information in identifiable form by members of the public. 

A systematic incorporation of databases of information in 
identifiable form purchased or obtained from commercial or public sources. 

_ A new interagency use or shared agency function that results in 

new uses or exchanges of information in identifiable form. 

___ a change that results in a new use or disclosure of information in 
identifiable form. 

A change that results in new items of information in identifiable 
form being added into the system/project. 

_ Changes do not involve a change in the type of records maintained, 
the individuals on whom records are maintained, or the use or 
dissemination of information from the system/project. 

_Other (Provide brief explanation]: 

3, Does a PI A for this system/project already exist? 

_NO _YES 

If yes: 

a. Provide date/title of the PI A; 

b. Has the system/project undergone any significant changes since the PI A? 

_NO _.YES 

(i he n 4 is new complete and after drvi&ios uppt ovalls) should he submitted to 
FBI OGC Pi 11 lot tin d F BI appi < at sod deter minatlon If Ft i and/or i the 
actions are required.] 
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FINAL FBI APPROVAL / DETERMINATIONS / CONDITIONS; 


PI A is required by She H-Gover-unem A eh 
\ 1 x x e v ^ o o is x ^ '> . 

h I'! \ is' w md'lmbed x'o HE GO\ i.hies am RMO 0\ mOxixSi ''' v tx' \ N o I im >. 

' X v S S V Wx V \ S x ' > S K \ s ' I ' S's X XX X x 


PI A is hot required for She following re-wonts): 

Vvv' ( S x ' 'x ' 5 > < !s ' lx I 

^ v 1 s f < > X > V Xx. M <x ' > ‘ V 1. S ! S 

.information in so v-sOns relates So internal gorernmcns operations. 

.System has bees; previous!)' assessed orate- an evaluation similar So a PI A. 

No significant privacy issues (or privacy issues arc unchanged j. 

Ollier fdeser-be): 


ig significant privacy risks) 


Applicable SORN(sp .lYe \ Hi (Nemo RceoGs Syssem. .11 tel ICK/f; fRdKIl mmtehed as (G bed. Row bCY 0 G>. 

ifhi998},asy;u;iea<lcdjuiiFeN Reg,J7200iMarO)AiMijjAsyi66;j:cd,RegJ99Vli.jra;ie.4,ei)0)j : 


Notify FBI RMD/RIDS per MIOG i90.23? ...X... No .Yes-Gee sample PC os; PCi,U intranet website her 

htspr/GoiTie/DOXfGC/FTB/PCi,;j/l > rivaeyCivii%20i..iberfies%20ibbratydonn for sniog. i 90-2-3 ee.wpd 

SORNVSORN revisions) required? ...X... No .Yes 


ttepam ssx me a-Id [Ao; 
N/A 


Acs (e}(3) stale met 


\ v N V x v < v , 'V N V 0v<! <* x '.xxx x v 'x 1 x x O x s X 

X XX X V x x > XX X ' x'X x ! x. X > O U< ' >X xt t XX 1 ' X ' X ' X X 

schedule approved by she National Archives and Reeosds Administration is necessary. RMD can provide advice on this 
as well os on compliance with requirements lor Electronic Record keeping Cert ification and arsy necessary updates. 


Other: Use BCR. application is encompassed by tin 
Routine iYualvos- Chexl'lG: tCr ibe appheaii-m w hi 


FLA ha I so Ri-uoux' lYuet've 
posted on PCI.GY website 


previously sous to DO). A 


| \xl X'X X 

Prlvucy ssp;:l Civil Llberijes Cnii 


ixh'k-CT»P|Jo!5; 


Brian Bror-ey. Acting Deputy General Cossnsc 
FBI Privacy and Civil Liberties Office?- 


Signatun 

IXUe S>cm.d: 


ccCc 
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L INFORMATION ABOUT TOE SYSTEM / PROJECT 


L Provide si general (iescriptinn of the system or project that includes: (a) .name of 
the .sysiem/prejeel, mdudirig associated acronyms; (b) structure of the 
sysfem/jmtjeci., tndndlog miaram nee t ions with other projects or systems; (c) 
purpose of the systeso/projeet; (d) nature of the oh > m the system/projcct 

ami how it. will he used; (e) who will have access to the information i.» the 
systeto/projeet; (f) and the manner of transmission to all users. 

' - ev ev ! v eiy 20,000 cases in w s 

(Li)} examiners may have conducted microscopic analysis of hair evidence. The review 

S l v vv V \ it N ' N l V a ) t N N > . N N s 

s ot \ vw Kvi v mem* iv w v'v v ' ' v «. 

^ ^ ' op t *<■ s l ;u.v,i >, creeds ny* ^ In *v ‘ s , w 

<■ * V N > ' t t t t ) S \ V N NN 

' ■,, ' o k\ no e n net t oD w . wt, ' t horw \ * . v 

‘ ' v v ' ■> n so! 1 >. L ' ' o t n , s i 

review information, it is anticipated that the Information provided will consist of a copy 

' ' m pm v v v\ s v 

V N , ' V V. V , X s' U * , „ 

testimony, 

xx W > n > \> 's' v ' , v i ,t t \0 'O w s ' W' t ' " \' 

m t, ' i m 1 i x v ^ t 

the relevant prosecutor's office. These entities will be asked whether there was a trial or 
V On X N , W W " L ' V ! 1 W N ' N INS 

S "> V\ ' s ! i S ! ( ' t' ! s ' V ' V 

also request a transcript of that testimony. The SRC will review the tab report and 
transcript, if any, to determine whether any statements made during the FBI testimony or 

l lv< N v. ' 0V V VUKP N ’ V lit O' l N N ' 'W N!N >C 

with the results of the SRC review and, as noted above, may also provide those results to 
foe IP and NACDL. 

The Special ! echnologies arid .Applications Section (ST AS) is developing and 
n . ' e m n o' ' w ! C n A \ v> v ! ' e v v ! o' '' a\ ' ■ 

N V> , ' N S' '' V ' N 'N - , < ' V > V N .V \N X „ , V n fo „ 

Access Database, and a Share Point application previously used by review team personnel 
for data maintenance and workflow management. The BCR application will utilize the 
Ks hi v,d \na.wis and t mapt toy. Nctwo v , f \t' N d 1 c ,a, move owe and 

nn , 'V'nn'n 

Relevant irdbrmation front each tile under review will bo added to the BCR 
database. The data will include: the FBI ease classification and file number; the names of 
the I Ri i w vnmei \w ,ewmy, d e ea-'- , 'he lew en o e-.ru'w, am"V.' that ruhat nod the 
e tee lb s v ?e >e o m> aspect or vi - rovided by 

n * ' r t ! i K v 5 O ' » n i 
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I NCi \SSIFIf 

o>si's;v > k C£|£ >t oi In- >v\ km tshk ?s..s\ osv. ssdo the d sir >e P'rsh -! Soon! V\ sv 
numbers of seine hulk ideals} Access to f ICR o if K> fee nee to smpoxim;,kyt\ ^ 5 t'fll 
esitployees assigned to ihe revs esc tease, she Laboratory Division. STAS, and the Office 
the General Counsel. 

I he fust \eisss-n .a she HRC oa\ dope p id ;n Sepumbcf dot A SI AS asik/ls 
vO'Oi ' tiha 'i i p' ivk.sn nKy \ Jesse us e 

uidunees existing e spuSCstk s. 

2. Does the sy^tem/prplect eoSkvu maintain. or ihssomksaso any information about, 
sodss ideals the., a kim'soo he ate or status sh person, regardless ofnahonalhx '>.' 

.NO jif no, STOP. The PTA Is turn complete and after division appro* a Is 

.*ho«Id he submitted to FBI OCC/fCI.l far final FBI approvat. Ids less tost are 
others ise ndv Red, no PI A is mpdrrdd 

X Y ES | If yes, please eoatkme.f 

' Pka.se indicate si any of the Sol ho, nip ebaractesisiks apply to the kd'orosatiou m the 
system about individuals: Bestr ' mind that log.-ots Aoonotng may identity or he 
linkable to anirsdlvidsia's, 

(Cheek all that apply s 

X The information directi) Jersnsles specific uxik ideals. 

t K ssstosnsnOess \ ' v,\\v V he sated ss* eoe|tld f oh St th usher ,us:o elensenss, 
to indirectly identify specific individuals. 

\ I he . -ns * an x out S' 4 ,b'*s >e.us\i. o: u.soc a ' ss a 0^1 \ d'shk ss e 

is h sited or linkable to spec she uxiivkkudCs. 

If yon marked am of the above, proceed to Question 4, 

’None of the above II none of the alxrve, describe why the udorfdati does not 
\'e".jh gj^csfse tnpsv Co ;i v either directly s>r iodireuh 

■ Does the \> stetn ptoseei pertain only to government employees., oomnsetoss, or 
consuhanuC 

X NO YES 


Is sitfontsation ahoot Cnst'.d Stake eh-/e>s\ or lavs hhC u.tsstsned permanent resident 
. o * senxxed ' |R .he *vsk‘>n pro ee- K sumodj othc' pmsuo s mesad'se*'' 

.NO. |If no, skip to question 
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.X.YES. j!f yes, proceed to the aext question) 

6. Does the system project collect any irdormallon dl reedy from the person who is she 
subject of she information? 

.X.NO |If no, proceed to question 7,j 

.YES 

a. Does she systern/projeet support criminal, CT, or 111 investigations or 
assessments? 

.NO 


YES {'If yes., proceed to question 7,| 

b. Are subjects of intormadon Eons whom the irdonsration \ directly collected 
presided a written Privacy Act. (c)(3) statement (either on the collection form or sla a 
separate notice)? 

NO {The program will need to work with PCLtJ to develop/implement 
the necessary tenths)) 

YES identify any forms, paper or electronic, used to request such 
iaformotioo front the inforn.nd.ion subject: 

7. \ „ V V s \ \ \ V "A 

s> steerrsojcc!? Full SSNs should only be used as identdiers in limited instances. 

.NO .X.... YES If yes, check ah that apply: 

X SSNs are necessary to establish-Yordirm the identity of subjects, victims, 
witnesses or sources in this law en.forecrne.rjt or intelligence activity. 

.SSNs are necessary to identify FBI personnel in this internal administrative 

system. 

SSNs are important for other reasons. Describe: 

\ e syslc y et provides spec SSb SSNs 

encrypted, hidden Norn ail users via a look-up table, or only available to certain 

N f| W ' \ "■ N s V 

participating in the halt evidence review, based on a need-io-know.. An HCR 
Prog rant Administrator most approve requests tor system access and use privileges. 


org 
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.Yes, Information systems operated by contractors for the b'Bl rosy be 

Ns, ' V N s s vs N \s ss 

contains standard contract clauses that must be included .in toe event the system 
collects, maintains or disseminates PH and additional requirements may be 
imposed as a matter of Department or Justice policy. Consultations with the 

s' SS S V Ns N S f s Os 

system, for the FBI. 

l ias the system undergone Certification & Accreditation {C&A1 by the FBI 
Security Division (SecDf? 

NO if me indicate reason: if C&A is pending, provide anticipated 
completion date: 

.X YES If yes. please indicate the following, if known: 

NCR is an Oracle application residing or: I At NS r &n-d -s not separately 
accredited. 1 AC NET was re-accredited on March I 5. '2012. and has Authority to 
Operate (A.TO) through March 22. 2015 at the following risk levels. 


Cikvnfidcntiauty: 

Low 

Moderate 

..1. High 

' 'S 

.Low 

Y Moderate 

I.High 

Availability: 

l.o tv 

X Moderate 

. 


\ " ' S NS, S \ ' ' S , 

Does the system cos-duct data mining as defined in Section 804 of the 
implementing Recommendations of the 0/11 Commission Act of 2007. p.L 110- 
55 (coddled at 42 DSC 2000ec-5 ; ? 

.X. NO 

YES Ify eSs please describe the data mining function:: 
is this a. national security system (as determined by the SecDO 
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